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DETAILED ACTION 



1 



This action is in reply ^to applicant's correspondence of 22 December 2005. 



2 



Claims 1-38 are pending for examination. 



3 



Claims 1-38 remain rejected. 



Claim Rejections - 35 USC §102 



The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except diat an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21 (2) of such treaty in the English language. 

4. Claims 1-38 are rejected under 35 U.S.C. 102(e) as being anticipated by Albaugh et al, 
U.S. Patent 6,687,83181. 

5. As per claim 1 ; "An apparatus for accessing data from a database through a security 
mechanism, the apparatus comprising: 

a first application capable of 

being executed on a client computer [ABSTRACT, figures 7,8,10-15 and 
associated descriptions, as broadly interpreted by the examiner.]; 
one or more proxy objects 



being generated in response to 



commands from the first application, 



the proxy objects requesting 
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data from a database [ABSTRACT, figures 7,8,10-15 and associated 
descriptions, whereas the use of the multiple security enablement's clearly are 
utilized in a database access environment (i.e., figure 7 and associated 
description) via proxy object generation/instantiation over the network (i.e., 
Internet), as broadly interpreted by the examiner.]; 
one or more drivers capable of 

being stored on a server computer [ABSTRACT, figures 7,8,10-15 and associated 
descriptions, whereas the use of the multiple security enablement's clearly are utilized in 
a database access environment (i.e., figure 7 and associated description) via proxy object 
generation/instantiation over the network (i.e., Internet), whereas the database access 
encompass the particular database driver objects required for access, as broadly 
interpreted by the examiner.]; and 
a second application capable of 

being executed on a server computer 

separated from the first application by a security mechanism, 
the second application 

receiving the proxy objects fi-om the first application, 
generating a database query based on the proxy objects and the drivers and 
returning the database query results to the first application [ABSTRACT, 
figures 7,8,10-15 and associated descriptions, whereas the use of the multiple 
security enablement's clearly are utilized in a database access environment (i.e., 
figure 7 and associated description) via associated proxy object 
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generation/instantiation over the network (i.e., Internet) upon client 
initiation/request, whereas the database access encompass the particular database 
driver objects required for access with the security mechanism located in the 
logical data/object path (i.e., between the client and server(s) with associated 
references as accessed across the network via associated ORB processes), as 
broadly interpreted by the examiner.].". 

Further, as per claim 1 1, this claim is the method claim for the system (apparatus) claim 1 
above, and is rejected for the same reasons provided for the claim 1 rejection, as such; "A 
method for accessing data located behind a security mechanism, comprising: executing a first 
application on a client computer that generates one or more proxy objects; communicating the 
proxy objects to a second application on an application server; generating one or more database 
requests at the application server based on the proxy objects, the database requests being 
generating using database drivers; forwarding the database requests to a database; returning the 
data from the database to the application server; and providing the data back to the client 
computer using the proxy objects.". 

Further, as per claim 20, this claim is the system mean plus function claim for the system 
(apparatus) claim 1 above, and is rejected for the same reasons provided for the claim 1 rejection, 
as such; "A system for accessing; data located behind a security mechanism, comprising: a client 
having means for generating one or more database proxy objects in response to a database 
request; an application server comprising means for processing the received database proxy 
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objects and means for using one or more: drivers to generate one or more database requests 
based on the database proxy objects; and wherein the client interacts with the database through 
the appHcation server so that a security mechanism protecting the cHent does not interrupt the 
accessing of the data in the database.". 

6. Claim 2 additionally recites the limitation that; "The apparatus of Claim 1, wherein 
the first and second applications are 
Java language applications. 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORBA object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61 -col. 5, line 
9, col. 6,lines 30-63) constitutes first and second Java language applications, as broadly 
interpreted by the examiner ). 

Further, as per claim 12, this claim is the method claim for the system (apparatus) claim 2 
above, and is rejected for the same reasons provided for the claim 2 rejection, as such; "The 
method of Claim 11, wherein 

the first and 

second set of applications are 

Java language applications.". 
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Further, as per claim 21, this claim is the system mean plus function claim for the system 
(apparatus) claim 2 above, and is rejected for the same reasons provided for the claim 2 rejection, 
as such; "The system of Claim 20, wherein 

the generating means and 

the processing means are 

Java language applications ". 

7. Claim 3 additionally recites the limitation that; "The apparatus of Claim 2, wherein 

the first application comprises an applet.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORB A object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61-col. 5, line 
9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java language 
applications, as broadly interpreted by the examiner ). 

Further, as per claim 13, this claim is the method claim for the system (apparatus) claim 3 
above, and is rejected for the same reasons provided for the claim 3 rejection, as such; "The 
method of claim 12, wherein 

executing the first application further comprises 
executing a Java applet.". 
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Further, as per claim 22, this claim is the system mean plus function claim for the system 
(apparatus) claim 3 above, and is rejected for the same reasons provided for the claim 3 rejection, 
as such; "The system of Claim 21, wherein 

the generating means fiarther comprises 
an applet.". 

8. Claim 4 additionally recites the limitation that; "The apparatus of Claim 3,wherein 
the second application comprises 

a servlet.". 

The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORBA object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61-col. 5,line 

9, col 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java language 
applications, as broadly interpreted by the examiner.). 

9. Claim 5 additionally recites the limitation that; "The apparatus of Claim 4 further 
comprising 

an application server that 

executes the servlet.". 

The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col 4,lines 61- 
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col. 5,line 9, col 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications, as broadly interpreted by the examiner.). 

Further, as per claim 14, this claim is the method claim for the system (apparatus) claim 5 
above, and is rejected for the same reasons provided for the claim 5 rejection, as such; "The 
method of Claim 13 further comprising executing the second set of applications on the 
application server that process the proxy objects from the client computer, wherein the second 
set of applications comprises servlets.". 

Further, as per claim 23, this claim is the system mean plus function claim for the system 
(apparatus) claim 5 above, and is rejected for the same reasons provided for the claim 5 rejection, 
as such; "The system of Claim 22,wherein the processing means further comprises a set of 
servlets.". 

10. Claim 6 additionally recites the limitation that; "The apparatus of Claim 5 further 
comprising 

a database server that contains the data being accessed by the application server 
wherein 

the database server and 

the application server are located in different geographic areas.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
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interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5, line 9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39) as broadly interpreted 
by the examiner.). 

Further, as per claim 15, this claim is the method claim for the system (apparatus) claim 6 
above, and is rejected for the same reasons provided for the claim 6 rejection, as such; "The 
method of Claim 14 further comprising accessing the database using a 2 database server that 
contains the data being accessed by the application server wherein the database server and the 
application server are located in different geographic areas.". 

Further, as per claim 24, this claim is the system mean plus function claim for the system 
(apparatus) claim 6 above, and is rejected for the same reasons provided for the claim 6 rejection, 
as such; "The system of Claim 23 further comprising means for storing the database that contains 
the data being accessed by the application server wherein the database server and the application 
server arc located in different geographic areas.". 

1 1 . Claim 7 additionally recites the limitation that; "The apparatus of Claim 6 further 
comprising 

a communications network that permits 
the client, 

the application server and 
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the database server to communicate data with each other and 
wherein the data communications between 
the client and 

application server occur using 

the hypertext transfer protocol (HTTP) that 

tunnels through the security mechanism.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39). Further, whereas the 
use of the multiple security enablement's clearly are utilized in a database access environment 
(i.e., figure 7 and associated description) via associated proxy object generation/instantiation 
over the network (i.e., Internet, and associated HTTP transfer protocol) upon client 
initiation/request, whereas the database access encompass the particular database driver objects 
required for access with the security mechanism located in the logical data/object path (i.e., 
tunneling path between the client and server(s) with associated references as accessed across the 
network via associated ORB processes), as broadly interpreted by the examiner.). 

Further, as per claim 16, this claim is the method claim for the system (apparatus) claim 7 
above, and is rejected for the same reasons provided for the claim 7 rejection, as such; "The 
method of Claim 15, wherein the communications between the client computer and the 
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application server uses the hypertext transfer protocol (HTTP) that tunnels through the security 
mechanism 

Further, as per claim 25, this claim is the system mean plus function claim for the system 
(apparatus) claim 7 above, and is rejected for the same reasons provided for the claim 7 rejection, 
as such; "The system of Claim 24 further comprising means for communicating between the 
client, the application server and the database server to communicate data with each other and 
wherein the data communications between the client and application server occur using the 
hypertext transfer protocol (HTTP) that tunnels through the security mechanism.". 

12. Claim 8 additionally recites the limitation that; "The apparatus of Claim 7, wherein 
the data communications between 
the client and 

the application server occur over port 80.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
coL 5,line 9, col, 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39). Further, whereas the 
use of the multiple security enablement's clearly are utilized in a database access environment 
(i.e., figure 7 and associated description) via associated proxy object generation/instantiation 
over the network (i.e., col. 8,lines 41-43, where the teachings of 'The target ID identifies the 
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server target object while the port ID identifies a port used to address the server target object. 
For example, port 80 on an Internet node indicates a web server.' as referenced to Internet, and 
associated HTTP transfer protocol specifically apply) upon client initiation/request, whereas the 
database access encompass the particular database driver objects required for access with the 
security mechanism located in the logical data/object path (i.e., tunneling path between the client 
and server(s) with associated references as accessed across the network via associated ORB 
processes), as broadly interpreted by the examiner.). 

Further, as per claim 17, this claim is the method claim for the system (apparatus) claim 8 
above, and is rejected for the same reasons provided for the claim 8 rejection, as such; "The 
method of Claim 16, wherein the communications between the client and the application server 
occur over port 80. '\ 

Further, as per claim 26, this claim is the system mean plus function claim for the system 
(apparatus) claim 8 above, and is rejected for the same reasons provided for the claim 8 rejection, 
as such; "The system of Claim 25, wherein the data communications between the client and the 
application server occur over port 80.". 

13. Claim 9 additionally recites the limitation that; "The apparatus of Claim 8, wherein 
the one or more database drivers further comprise 
one or more JDBC drivers.". 
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The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) and support of the Java server database access addresses the 
JDBC drivers aspect, as broadly interpreted by the examiner.). 

Further, as per claim 18, this claim is the method claim for the system (apparatus) claim 9 
above, and is rejected for the same reasons provided for the claim 9 rejection, as such; "The 
method of Claim 17, wherein the one or more database drivers further 2 comprise one or more 
JDBC drivers.". 

Further, as per claim 27, this claim is the system mean plus function claim for the system 
(apparatus) claim 9 above, and is rejected for the same reasons provided for the claim 9 rejection, 
as such; "The system of Claim 26, wherein the one or more database drivers further comprise 
one or more JDBC drivers.". 

14. Claim 10 additionally recites the limitation that; "The apparatus of Claim 6, wherein 
the application server further comprises 

means for batching one or more database requests from the client computer 
so that the batch of database requests are 

sent periodically to the database server.". 
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The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figures 4,12 and associated descriptions, col. 
4,lines 61 -col. 5,line 9, col, 6,lines 30-63) and support of the Java server database access 
addresses the IDBC/batch [transaction oriented] aspects, as broadly interpreted by the 
examiner). 

Further, as per claim 19, this claim is the method claim for the system (apparatus) claim 
10 above, and is rejected for the same reasons provided for the claim 10 rejection, as such; "The 
method of Claim 15 further comprises batching one or more database requests from the client 
computer at the application server so that the batch of database requests are sent periodically to 
the database server,". 

Further, as per claim 28, this claim is the system mean plus function claim for the system 
(apparatus) claim 10 above, and is rejected for the same reasons provided for the claim 10 
rejection, as such; "The system of Claim 24, wherein the application server further comprises 
means for batching one or more database requests from the client computer so that the batch of 
database requests are sent periodically to the database server.". 

15. As per claim 29; "A system [This claim is the method embodied soflv^are claim for the 
system (apparatus) claims 1-5,9 above, and is rejected for the same reasons provided for the 
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claims 1-5,9 rejection] for accessing data by a Java applet wherein the data is located behind a 
security mechanism', the system comprising: 
a client 

that executes a Java applet having a series of instructions that includes 

accessing data from a database, 
the client further comprising 

one or more database proxy objects that are 

generated by the Java applet in response to a database request; 

an application server 

that executes a servlet that interact with 

the database proxy objects and 
generates one or more objects corresponding to 

the database proxy objects, 
the application server fiirther comprising 
one or more JDBC drivers that are 

integrated into the objects generated by the servlets 
wherein 

the JDBC drivers interface with a database so that 

the application server requests data from the database; and 

wherein 

the applet interacts with the database through the application server so that 
a security mechanism protecting the client 
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does not interrupt the accessing of the data in the database ". 



16. As per claim 30; "A system [This claim is the method embodied software claim for the 
system (apparatus) claims 1,5 above, and is rejected for the same reasons provided for the claims 
1,5 rejection] for accessing data located behind a security mechanism, comprising: 
a client 

that executes a first application having a series of instructions that includes 

accessing data from a database, 
the client further comprising 

one or more database proxy objects; 
an application server 

that executes one or more second applications that interact v^ith 

the database proxy objects and 
have one or more corresponding objects, 
the application server fijrther comprising 

one or more drivers that interface v^ith a database so that 

the application server requests data from the database; and 

wherein 

the client interacts with the database through the application server so that 
a security mechanism protecting the client: 

does not interrupt the accessing of the data in the database 
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17. Claim 3 1 additionally recites the limitation that; 'The system of Claim 30, wherein 
the first and second set of applications are 

Java language applications 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORBA object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61 -col. 5, line 
9, col 6,lines 30-63) constitutes first and second Java language applications, as broadly 
interpreted by the examiner.). 

1 8. Claim 32 additionally recites the limitation that; "The system of Claim 31, wherein 
the first application comprises 

an applet.". 

The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORBA object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61-col. 5, line 
9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java language 
applications, as broadly interpreted by the examiner ). 

19. Claim 33 additionally recites the limitation that; "The system of Claim 3 1, wherein 
the second set of applications comprises 

a set of servlet s.". 



Application/Control Number: 09/872,502 Page 18 

Art Unit: 2136 

The teachings of Albaugh et al suggest such Hmitations (i.e., ABSTRACT, figures 7,8,10-15 and 
associated descriptions, whereas the use of Java in support of the CORBA object bus interfacing 
for an associated application (i.e., figure 4 and associated description, col. 4,lines 61-col. 5, line 
9, col. 6,lines 30-63) constitutes first (i.e., applet) and second set (i.e., servlet(s)) Java language 
applications, as broadly interpreted by the examiner ). 

20. Claim 34 additionally recites the limitation that; "The system of Claim 33 further 
comprising 

a database server that contains the data being accessed by the application server 
wherein 

the database server and 

the application server are located in different geographic areas.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39) as broadly interpreted 
by the examiner.). 

21 . Claim 35 additionally recites the limitation that; "The system of Claim 34 further 
comprising 

a communications network that permits 
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the client, 

the application server and 

the database server to communicate data with each other and 
vs^herein the data communications between 
the client and 

application server occur using 

the hypertext transfer protocol (HTTP) that 

tunnels through the security mechanism.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39). Further, whereas the 
use of the multiple security enablement's clearly are utilized in a database access environment 
(i.e., figure 7 and associated description) via associated proxy object generation/instantiation 
over the network (i.e., Internet, and associated HTTP transfer protocol) upon client 
initiation/request, whereas the database access encompass the particular database driver objects 
required for access with the security mechanism located in the logical data/object path (i.e., 
tunneling path between the client and server(s) with associated references as accessed across the 
network via associated ORB processes), as broadly interpreted by the examiner.). 



22. Claim 36 additionally recites the limitation that; "The system of Claim 35, wherein 



Application/Control Number: 09/872,502 Page 20 

Art Unit: 2136 

the data communications between 
the client and 

the application server occur over port 80.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) constitutes first (i.e., applet) and second (i.e., servlet) Java 
language applications not necessarily collocated (i.e., col. 6,lines 20-39). Further, whereas the 
use of the multiple security enablement's clearly are utilized in a database access environment 
(i.e., figure 7 and associated description) via associated proxy object generation/instantiation 
over the network (i.e., col. 8,lines 41-43, where the teachings of 'The target ID identifies the 
server target object while the port ID identifies a port used to address the server target object. 
For example, port 80 on an Internet node indicates a web server.' as referenced to Internet, and 
associated HTTP transfer protocol specifically apply) upon client initiation/request, whereas the 
database access encompass the particular database driver objects required for access with the 
security mechanism located in the logical data/object path (i.e., tunneling path between the client 
and server(s) with associated references as accessed across the network via associated ORB 
processes), as broadly interpreted by the examiner.). 

23. Claim 37 additionally recites the limitation that; "The system of Claim 36, wherein 
the one or more database drivers further comprise 
one or more JDBC drivers.". 
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The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figure 4 and associated description, col. 4,lines 61- 
col. 5,line 9, col. 6,lines 30-63) and support of the Java server database access addresses the 
IDBC drivers aspect, as broadly interpreted by the examiner.). 

24. Claim 38 additionally recites the limitation that; "The system of Claim 34, wherein 
the application server further comprises 

means for batching one or more database requests from the client computer 
so that the batch of database requests are 

sent periodically to the database server.". 
The teachings of Albaugh et al suggest such limitations (i.e., ABSTRACT, figures 1-5,7,8,10-15 
and associated descriptions, whereas the use of Java in support of the CORBA object bus 
interfacing for an associated application (i.e., figures 4,12 and associated descriptions, col. 
4,lines 61 -col. 5,line 9, col. 6,lines 30-63) and support of the Java server database access 
addresses the JDBC/batch [transaction oriented] aspects, as broadly interpreted by the 
examiner.). 

Response to Amendment 

25, As per applicant's argument concerning the lack of teaching by Albaugh et al of 
"generation of proxy objects [via applications command]", the examiner has fully considered in 
this response to amendment; the arguments, and finds them not to be persuasive. Nowhere in the 
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claim language does the recitation of a requirement for an explicit claiming of the differentiation 
aspect concerning the use of an application not inherently associated with the use of the 
instantiated objects (i.e., proxies or whatever type of objects); just the broad "first application 
capable . . . second application ..." criteria per se. Further, while Albaugh et al may be primarily 
'concerned' with object/security functionality aspects, nonetheless, the reference inherent 
teachings (i.e., object instantiation/creation is inherent in an application or client and server 
application that uses objects) clearly addresses the claim limitations as presently presented. 
Therefore, the various Albaugh et al references to the performance of objects 
functionality/transfer (i.e., client to server request, or server to client response in inherently the 
form of object references; clearly objects transferred nonetheless), as being broadly interpreted 
by the examiner, as per the claim language, would therefore be applicable in the rejection, such 
that the rejection support references collectively encompass the said claim limitations in their 
entirety. 

26. As per applicant's argument concerning the lack of teaching by Albaugh et al of 
"forwarding of proxy objects", the examiner has fully considered in this response to amendment; 
the arguments, and finds them not to be persuasive, again, as discussed above. Further, the 
various Albaugh et al references to the performance of objects fianctionality/transfer (i.e., 
inherently in the form of object reference requests; clearly objects transferred nonetheless), as 
being broadly interpreted by the examiner, as per the claim language, would therefore be 
applicable in the rejection, such that the rejection support references collectively encompass the 
said claim limitations in their entirety. 
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27. As per applicant's argument concerning the lack of teaching by Albaugh et a! of "security 
mechanisms . . the examiner has fully considered in this response to amendment; the 
arguments, and finds them not to be persuasive (i.e., figure 8 and associated descriptions dealing 
with the client/server security services as associated with the ISO layers below the application 
layer (that calls/formats at the protocol, TCP, etc., layers using SSL) thereby clearly associating 
an application instantiated objects utilizing security services in a defined communications 
channel/session. 

28. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS fi-om the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 
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Conclusion 



29, Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861. The examiner can normally be reached Monday 
through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (571) 272-3795. The Fax number for the organization 
where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http://pair-direct.uspto.gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Ronald Baum 
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